Lucene search

PRIOn knowledge basePRION:CVE-2023-38988

HistoryJul 28, 2023 - 9:15 p.m.

Information disclosure

2023-07-2821:15:00

PRIOn knowledge base

www.prio-n.com

information disclosure

delete function

oanotifycontroller

jeesite v1.2.6

authenticated attackers

administrators

nvd

4.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.3%

JSON

An issue in the delete function in the OaNotifyController class of jeesite v1.2.6 allows authenticated attackers to arbitrarily delete notifications created by Administrators.

CPENameOperatorVersion
jeesiteeq1.2.6

CPE	Name	Operator	Version
	jeesite	eq	1.2.6

References

github.com/thinkgem/jeesite/issues/517